thread-writer
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown and evaluation scenarios. It does not include any executable scripts, binaries, or shell commands, precluding risks of malware or remote code execution.
- [SAFE]: No patterns associated with data exfiltration or credential theft were found. The skill does not perform network operations or access sensitive system files like SSH keys or environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external inputs, which constitutes a standard ingestion surface for indirect prompt injection.
- Ingestion points: User-provided story ideas and the external files brand-profile.md and voice.md referenced in SKILL.md.
- Boundary markers: The skill does not define specific delimiters to isolate user-supplied data from its internal instructions.
- Capability inventory: The skill's functionality is limited to text generation; it lacks permissions for file writing, network calls, or system command execution.
- Sanitization: No sanitization logic is present to filter for malicious instructions embedded in the processed inputs.
Audit Metadata